EthicsPortal vs. Whispli #
Whispli is an enterprise whistleblowing and case management platform with offices in Sydney, Paris and Boston. It states 300+ organisations across 60+ countries, ISO 27001 certification for the whole platform, and SOC 2 Type II. Whispli offers selectable hosting regions (including France and Germany), 70+ languages, a Voice AI phone hotline, and a mobile app. Prices are not published: every package is sold by quote, on a 3-year contract with annual payment (checked October 2026).
Quick comparison #
| Feature | EthicsPortal | Whispli |
|---|---|---|
| Pricing | €41.67/mo billed annually | Quote only (3-year contract, annual payment) |
| Whistleblowing channel activation | Self-service, minutes | Quote required; entry package lists self on-boarding |
| Encryption | Sensitive fields at rest + TLS in transit | Yes (customer-managed keys on Enterprise plan) |
| EU hosting | Yes (Hetzner, Germany) | Yes (France or Germany, from Plus plan) |
| File metadata stripping | Yes (EXIF, GPS, author info) | Yes (metadata removed from files) |
| IP anonymization | Yes (one-way hash, no storage) | Yes (no IP address or caller ID collected) |
| Oral / voice reporting | Yes (in-browser voice recording, voice automatically disguised) | Yes (AI voice hotline with transcription) |
| Reports by email | Included: own address per channel; sender hidden from handlers | Yes (integrated email intake) |
| Mobile app | No | Yes (iOS and Android) |
| Audit trail | Yes, append-only | Yes (full audit logs) |
| Deadline tracking | Yes (7-day and 3-month with notifications) | Yes |
| Read-only auditor role | Yes (viewer role) | Not listed on their public pages (role-based and per-case permissions; external auditors can get case access) |
| Data export (GDPR Art. 20) | Yes (full-tenant ZIP, audit-logged) | Structured data export for audits and regulators |
| API and webhooks | Yes (report metadata, whistleblowing channel settings, members and audit trail; never report content) | Yes (open API) |
| Structured intake | Yes — 5 built-in Directive-aligned questions, all optional | Configurable intake forms |
| Languages | 14 (13 EU official + Luxembourgish) | 70+ |
| ISO 27001 | No | Yes (system-level) |
| Conflicts of interest module | No | Yes (Whispli Disclosures) |
Where Whispli is strong #
- Enterprise-grade security. ISO 27001 certified for the whole platform, not just hosting, plus SOC 2 Type II. Customer-managed encryption keys on the Enterprise plan.
- Voice AI hotline. AI-powered voice intake that transcribes verbal disclosures into structured cases. Useful for distributed workforces where written reporting is impractical. (EthicsPortal also supports oral reporting, but as in-browser voice recording rather than an AI-transcribed phone line — see below.)
- Mobile apps. iOS and Android apps for anonymous reporting and follow-up, included from the entry package.
- 70+ languages. Intake pages and the voice hotline work in 70+ languages. Whispli does not publish which EU official languages are covered.
- Beyond whistleblowing. Separate modules for conflicts of interest, gifts and hospitality, and culture surveys (Pulse).
Where EthicsPortal is different #
- Published flat pricing. EthicsPortal is €41.67/month billed annually, published up front. Whispli does not publish prices: its pricing page names four packages, each sold by quote on a 3-year contract with annual payment (checked October 2026). For SMEs that need Directive compliance without enterprise features, a flat published rate keeps the budget predictable.
- Operational in minutes. Configure your whistleblowing channel, publish the reporting link, and operate the channel without an enterprise onboarding project. Whispli sells every package by quote; its entry package lists self on-boarding (checked October 2026).
- Published privacy engineering. Both vendors publish their main anonymity controls: Whispli’s security page states that file metadata is removed and IP addresses are not collected. EthicsPortal also publishes how each control works: one-way IP hashing, EXIF stripping by file type, non-deterministic encryption details, ClamAV scanning. This documentation is available to anyone evaluating the platform.
- Voice-disguised oral reporting. EthicsPortal accepts oral reports (Directive Art. 9(2)(b)) as an in-browser voice recording, and pitch-shifts the audio automatically — only the pitch-shifted recording is kept, and the original is deleted after processing. The objective is the opposite of transcription: protect the reporter’s voice, not capture it.
- Read-only auditor seat and full data export. A dedicated viewer role gives auditors and external counsel read access to every report and the audit trail without any ability to act on a case, and an admin can export the entire organization dataset as a ZIP (GDPR Art. 20), with both the request and the download recorded in the audit trail.
- Built-in structured intake. EthicsPortal ships five optional, Directive-aligned intake questions (relationship to the organization per Art. 4, source of knowledge, timing, prior reporting, retaliation concern per Art. 19) as a default guided step, with retaliation surfaced to handlers as an urgency badge. Whispli offers configurable intake forms; a Directive-aligned default question set is not described on its public pages (checked October 2026).
- Article-by-article Directive mapping. EthicsPortal publishes a Directive 2019/1937 coverage map matching each feature to specific Directive articles — useful for compliance officers documenting their channel.
Who should choose Whispli #
Whispli is the right choice for large organisations that operate in several countries and need ISO 27001 certification, Voice AI for frontline workers, customer-managed encryption keys, and modules beyond whistleblowing (conflicts of interest, gifts and hospitality). If your compliance team expects board-ready reporting dashboards and multi-entity governance at scale, Whispli is built for that.
Who should choose EthicsPortal #
EthicsPortal is the better fit for SMEs and mid-sized companies (50–500 employees) that need EU Directive 2019/1937 compliance without enterprise complexity or pricing. If the requirement is a focused whistleblowing channel rather than voice intake, mobile apps, and adjacent disclosure modules, EthicsPortal delivers the Directive workflow at a published €41.67/month price (billed annually).
Deploy your whistleblowing channel →
Last updated: